Static task
static1
Behavioral task
behavioral1
Sample
cd41130ef3cfa0b6e62baadedcee2262094701787a9146717b04d5a733c4a98a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cd41130ef3cfa0b6e62baadedcee2262094701787a9146717b04d5a733c4a98a.exe
Resource
win10v2004-20220812-en
General
-
Target
cd41130ef3cfa0b6e62baadedcee2262094701787a9146717b04d5a733c4a98a
-
Size
310KB
-
MD5
a53540df5494b47ab2ba0464ecbd0400
-
SHA1
7857ef4c4e5cc8dd841f5836948946f61007078e
-
SHA256
cd41130ef3cfa0b6e62baadedcee2262094701787a9146717b04d5a733c4a98a
-
SHA512
b4329c215f95f0ae859b8149876d40bab0b4a3eee2e6a9773f3bc68afd2a478cfc3a9010f89d99ce96a25c3891d232b95209789ccb4f864f9b5b76e4c42c5aca
-
SSDEEP
6144:CXpBTSZzeQwDqAeG5BEFT4I6/WPdGXLc+EbdH7nvv2+si2im9V:yB8eQfXkHz/WPQXLcJHbvu+si2j
Malware Config
Signatures
Files
-
cd41130ef3cfa0b6e62baadedcee2262094701787a9146717b04d5a733c4a98a.exe windows x64
24da1d9ed58579d257d131041116a096
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
wsock32
__WSAFDIsSet
version
VerQueryValueW
winmm
timeGetTime
comctl32
ImageList_Remove
mpr
WNetUseConnectionW
wininet
FtpOpenFileW
psapi
EnumProcesses
userenv
LoadUserProfileW
user32
GetDC
gdi32
LineTo
comdlg32
GetSaveFileNameW
advapi32
GetAce
shell32
DragFinish
ole32
CoGetObject
oleaut32
VariantTimeToSystemTime
Sections
.MPRESS1 Size: 295KB - Virtual size: 868KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE